Unrated severityNVD Advisory· Published Jul 29, 2004· Updated Jun 16, 2026
CVE-2004-2066
CVE-2004-2066
Description
SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:*
- (no CPE)range: =0.9.4
Patches
Vulnerability mechanics
References
5- www.securityfocus.com/bid/10827nvdExploitVendor Advisory
- secunia.com/advisories/12189nvdVendor Advisory
- marc.infonvd
- www.osvdb.org/8272nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/16834nvd
News mentions
0No linked articles in our index yet.